Run CI on every pull request, not only those targeting master

.github/workflows/ci.yml

@@ -2,9 +2,16 @@ name: Bridge CI
 
 on:
   push:
+    # Only master. A branch push needs no run of its own: a branch worth
+    # checking has a pull request, and that is what triggers below.
     branches: [master]
   pull_request:
-    branches: [master]
+    # Deliberately unfiltered by base branch. Filtering to `[master]` meant a
+    # pull request stacked on another branch got no run at all, and reported
+    # `mergeStateStatus: CLEAN` off the one check that is not this workflow --
+    # a green that said only "nothing required failed", never "the suite ran".
+    # A stack then accumulated unchecked changes until its root merged, so the
+    # first real run faced several pull requests' worth of change at once.
     types: [opened, reopened, synchronize, ready_for_review]
   workflow_dispatch:
 

docs/tally/compatibility/compatibility-matrix.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "bridge_commit_sha": "be1c20cc3fd66fa1ece196505c69f26e555e4b8e",
-  "compatibility_surface_sha256": "baaa9c6bc7559df335c6f79236cdd79e2cc38d7b26505d3732c5d59ac31d8d67",
+  "compatibility_surface_sha256": "b0a658a972bd150599add28b408fddf5026c3dc67a105e49f7256ca7ada255ad",
   "claims": [
     {
       "claim_id": "erp9-6-6-3-windows-education-xml-one-company",

docs/tally/compatibility/compatibility-surface.json

@@ -3,7 +3,7 @@
   "files": [
     {
       "path": ".github/workflows/ci.yml",
-      "sha256": "e9221b186b18d6c8df148e4492ac6733df55e772c041f3246f1aeee0249273c2"
+      "sha256": "c986297046d65dc1d218583410e693c9d017e1d72e3891d667012c8474db2ed1"
     },
     {
       "path": ".github/workflows/dependency-security.yml",
@@ -850,5 +850,5 @@
       "sha256": "a8ac2714fecf51947f2822c8c46d7ce2e8602c732780ff60566a7771f0836f9a"
     }
   ],
-  "manifest_sha256": "baaa9c6bc7559df335c6f79236cdd79e2cc38d7b26505d3732c5d59ac31d8d67"
+  "manifest_sha256": "b0a658a972bd150599add28b408fddf5026c3dc67a105e49f7256ca7ada255ad"
 }